Having spent some number of hours figuring out production flashing and field updates, I think I now understand the current methodology. The biggest challenge was to sort out the many obsolete forum posts. There are other variations (e.g. bootloader update OTA), but I think the overall process is right. Corrections and clarifications are greatly appreciated.